$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c4b2a32-b878-3e00-bc74-0f9281fcb4d5.roa File: 4c4b2a32-b878-3e00-bc74-0f9281fcb4d5.roa (raw, json) Hash identifier: htG+TqNvHso/iLhzxoh0/0JOqrN67qVTFz+zSlKSatY= Subject key identifier: A4:73:06:91:C0:05:08:F5:16:FE:E4:E1:8E:46:0C:21:DF:B2:6A:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA200345EB9CA1ADF6EF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c4b2a32-b878-3e00-bc74-0f9281fcb4d5.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 71.7.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:20:03:45:eb:9c:a1:ad:f6:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=29e37c42-4b7e-45fc-bf5b-74bc8109c082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:61:3d:43:74:e3:5d:13:f4:b7:6a:8b:92:3a: d2:8b:68:86:61:02:db:a3:e3:7c:45:a8:a6:2b:27: 49:ad:11:5b:ab:a2:19:b9:eb:c6:12:28:fb:3b:42: 55:05:95:e1:ab:46:51:09:9f:e6:d1:33:9a:97:e0: ff:c2:b9:d6:cc:e8:8d:b4:bc:a9:af:cf:81:b0:3d: 1c:83:f3:78:1f:c9:d2:71:3b:a6:b1:e2:7c:dc:f3: 6b:1f:fd:d4:81:a4:7b:84:41:98:92:80:91:d2:d3: 7b:34:b3:27:e3:41:10:fb:ef:91:5c:13:c4:1e:40: a1:26:db:3f:6b:75:6a:8b:1c:7a:b6:49:a9:4f:14: 3f:b1:8e:12:37:5e:30:be:d2:0e:20:be:7e:10:08: 7f:52:f2:5a:71:5c:a5:75:de:ad:11:c9:8f:e3:d1: 86:14:98:b6:40:a2:8b:c1:f6:14:f0:bb:6b:c8:3e: 77:2e:6c:6f:b4:32:1e:8c:77:f4:5e:1c:01:5d:5c: 65:31:b0:85:ea:ad:74:a8:a2:31:2b:dc:40:91:04: 91:c1:4e:4e:29:97:0c:86:ce:2e:65:e5:7e:46:84: ec:b2:1f:b1:d0:11:ef:e8:b6:31:d0:59:97:e2:ce: 11:29:5c:87:c2:d6:14:7d:9f:ac:94:8d:9d:35:5e: 7c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:73:06:91:C0:05:08:F5:16:FE:E4:E1:8E:46:0C:21:DF:B2:6A:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c4b2a32-b878-3e00-bc74-0f9281fcb4d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fa:cb:47:5c:83:b7:51:c3:5b:7a:9e:ee:c2:86:2e:b7:4f: 47:a6:35:ed:8e:db:4d:ef:43:4e:71:f9:15:86:b0:96:08:d6: 68:df:02:98:6b:14:30:f6:49:38:35:4d:09:cc:73:25:a6:b0: a6:1c:7f:7b:44:73:d4:82:e8:05:9b:8d:65:ee:7c:10:b9:8d: 71:e0:a7:8d:cd:d4:49:ab:87:6b:83:f2:e8:93:c5:5a:f8:3f: d4:3e:68:dd:f0:61:9b:47:ed:3b:61:07:2b:29:58:ff:5b:61: e5:fc:04:fa:d8:83:09:bf:37:f5:ce:11:c8:58:f9:9b:a2:cc: dd:6f:05:93:81:1f:e6:07:c4:d9:ae:2f:71:df:eb:18:77:d9: 52:59:2d:f4:e2:29:f8:67:0d:90:72:63:15:b8:86:4e:c3:7a: 4d:d4:18:8f:03:6d:a9:f3:d5:82:bd:94:14:0a:03:a6:01:a4: fb:fe:76:88:e5:2a:bf:f1:cb:a6:7f:1b:3f:4d:6c:73:46:5c: a2:37:5e:c1:57:b7:ea:0a:2b:55:7c:38:f0:8e:69:95:25:c3: 96:c8:40:dd:71:88:1d:8a:dd:d3:a5:0e:d7:f1:ae:99:02:3a: ad:2d:9d:0a:b1:cb:ee:b2:ed:85:e7:08:d1:86:d5:2a:fe:a7: b5:98:91:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiADReucoa3274AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk MjllMzdjNDItNGI3ZS00NWZjLWJmNWItNzRiYzgxMDljMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GE9Q3TjXRP0t2qLkjrSi2iGYQLbo+N8Raim KydJrRFbq6IZuevGEij7O0JVBZXhq0ZRCZ/m0TOal+D/wrnWzOiNtLypr8+BsD0c g/N4H8nScTumseJ83PNrH/3UgaR7hEGYkoCR0tN7NLMn40EQ+++RXBPEHkChJts/ a3Vqixx6tkmpTxQ/sY4SN14wvtIOIL5+EAh/UvJacVyldd6tEcmP49GGFJi2QKKL wfYU8LtryD53LmxvtDIejHf0XhwBXVxlMbCF6q10qKIxK9xAkQSRwU5OKZcMhs4u ZeV+RoTssh+x0BHv6LYx0FmX4s4RKVyHwtYUfZ+slI2dNV58IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRzBpHABQj1Fv7k4Y5GDCHfsmoHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGM0YjJhMzItYjg3OC0z ZTAwLWJjNzQtMGY5MjgxZmNiNGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP6y0dcg7dRw1t6nu7Chi63T0emNe2O203vQ05x+RWGsJYI1mjfAphr FDD2STg1TQnMcyWmsKYcf3tEc9SC6AWbjWXufBC5jXHgp43N1Emrh2uD8uiTxVr4 P9Q+aN3wYZtH7TthByspWP9bYeX8BPrYgwm/N/XOEchY+ZuizN1vBZOBH+YHxNmu L3Hf6xh32VJZLfTiKfhnDZByYxW4hk7Dek3UGI8Dbanz1YK9lBQKA6YBpPv+dojl Kr/xy6Z/Gz9NbHNGXKI3XsFXt+oKK1V8OPCOaZUlw5bIQN1xiB2K3dOlDtfxrpkC Oq0tnQqxy+6y7YXnCNGG1Sr+p7WYkQU= -----END CERTIFICATE-----Generated at Sun Jun 15 13:07:38 2025 by rpki-client